Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

omniauth-saml

rubygems

A generic SAML strategy for OmniAuth.

View on github.com · View on rubygems.org

Security Advisories for omniauth-saml in rubygems

Critical
8 months ago

omniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issue GSA_kwCzR0hTQS1odzQ2LTNobXIteDl4ds4ABFZ9

rubygems omniauth-saml
Critical
about 1 year ago

omniauth-saml vulnerable to Improper Verification of Cryptographic Signature GSA_kwCzR0hTQS1jdnA4LTVyOGctZmh2cc4AA_eZ

rubygems omniauth-saml
High
over 6 years ago

OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk0aG0tOHE2NS1ybXht

rubygems omniauth-saml

Filter by Severity

Critical 2 High 1